If you think about, if the firewall is running on the game level, it won't be very useful, Sourcemod will still lag the server if it's processing tons of packets. The only effective way of protecting specific processes against attacks is at the OS level. iptables should take care of the job on Linux systems, but I don't know any equivalent tools for Windows though.